summary refs log tree commit diff
diff options
context:
space:
mode:
-rw-r--r--trivium.rb4
1 files changed, 2 insertions, 2 deletions
diff --git a/trivium.rb b/trivium.rb
index 3e45eb5..fc5d652 100644
--- a/trivium.rb
+++ b/trivium.rb
@@ -62,8 +62,8 @@ class Dots < String
       case name
       when "link"
         title, desc = body.split("|", 2)
-        %{<p class="link"><span><a href="#{args.strip}">#{title.strip}</a>#{
-          SpanBlueCloth.new(desc.to_s).to_html}</span></p>}
+        %{<p class="link"><span><a href="#{CGI.escapeHTML(args.strip)}">#{
+          title.strip}</a>#{SpanBlueCloth.new(desc.to_s).to_html}</span></p>}
       when "quote"
         if args.strip.empty?
           src = ""